Legal
Sub-processors
These are the categories of sub-processor ChartChronicle Health Technologies Limited may engage to deliver the service. The exact set for your deployment depends on its configuration and region, and the definitive, customer-specific list is provided and kept current in your Data Processing Agreement. Each sub-processor is bound by data-protection obligations no less protective than those we accept.
Current sub-processor categories
| Purpose | Provider(s) | Region |
|---|---|---|
| Cloud hosting & compute | The cloud/data-centre provider for the customer's deployment region | Customer's chosen region |
| Database & object storage | Managed PostgreSQL and S3-compatible object storage (e.g. AWS S3, Cloudflare R2, MinIO) | Customer's chosen region |
| Payment processing | Paystack (Nigeria); Flutterwave (Ghana, Kenya, South Africa, Rwanda, Uganda, Tanzania) | Nigeria / pan-Africa |
| SMS / OTP delivery | The configured SMS gateway (e.g. Termii, Africa's Talking, Twilio) | Per provider |
| Transactional email | The configured SMTP/email provider | Per provider |
| Error & performance monitoring (optional) | Sentry (when enabled by the operator) | Per provider |
Changes & objections
We give notice of intended changes to sub-processors so that a controller may object on reasonable data-protection grounds, as set out in the DPA. Payment-card details are handled directly by the payment processors and are not stored by us.
Contact
For the customer-specific sub-processor list or any question, contact hello@chartchronicle.com.